Perform deep feature audits with transition-matrix and logical fault-injection validation.

Custom licenceAuto-check passedDevOps & Cloud

Install Audit Review

skills CLI
$ npx skills add testflows/TestFlows-GitHub-Hetzner-Runners --skill audit-review -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install testflows/TestFlows-GitHub-Hetzner-Runners audit-review --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/testflows/TestFlows-GitHub-Hetzner-Runners.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/audit-code .claude/skills/audit-review && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
audit-review
GitHub stars
102
Token cost
~2.1k tokens
SKILL.md length
886 words
Files
1
Skills in repo
1
Repo updated
First seen
Licence
Custom licence

At a glance

Perform deep feature audits with transition-matrix and logical fault-injection validation.

  • Works in 10 steps: If PR scope is large, partition by… → Build call graph first → Build transition matrix → …
  • Reviewing complex changes
  • SKILL.md covers Purpose, Workflow, Python Bug-Type Coverage… and Cloud Infrastructure Emphasis, plus 4 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Audit Review is an agent skill from testflows/TestFlows-GitHub-Hetzner-Runners. Perform deep feature audits with transition-matrix and logical fault-injection validation. Use when reviewing complex changes, regressions, state-machine behavior, config interactions, API/protocol flows, and concurrency-sensitive logic.

Its SKILL.md is about 2.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering Chaos engineering and CI/CD. It works with Python and GitHub Actions. The repository describes itself as: Autoscaling Self-Hosted GitHub Actions Runners on Hetzner Cloud.

When your agent uses it

  • Reviewing complex changes
  • State-machine behavior
  • Config interactions
  • API/protocol flows

Example prompts

  • “/audit-review”

Requirements

  • Python 3

Workflow steps

10 steps, taken from the first numbered list in SKILL.md.

  1. If PR scope is large, partition by functionality/workstream first
  2. Build call graph first
  3. Build transition matrix
  4. Perform logical testing of all code paths
  5. Define logical fault categories from the code under review
  6. Run logical fault injection category-by-category
  7. Confirm each finding with code-path evidence.
  8. Produce coverage accounting
  9. For async/concurrent paths, perform interleaving analysis
  10. For mutation-heavy paths, perform rollback/partial-update analysis

What it can do on your machine

Read from SKILL.md and the folder at commit 6923128. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Audit Review loads about 2.1k tokens when it runs. Until then it costs about 63 tokens; SKILL.md has 886 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~63
When it runs · the whole SKILL.md, loaded when a task matches
~2.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 886 words (~2,141 tokens).

“Run a repeatable deep audit for any feature and report confirmed defects with severity. Default mode is static reasoning unless runtime execution is explicitly performed.”

— opening of SKILL.md by testflows, Custom licence
name
audit-review

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .agents/skills/audit-code of testflows/TestFlows-GitHub-Hetzner-Runners.

Open the folder on GitHubat commit 6923128

Compare with similar skills

Audit Review next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Audit Review compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Audit Review this skilltestflows/TestFlows-GitHub-Hetzner-Runners102—~2.1kAutomated safety check: PassCustom licence
Reproduce macOS Python FlavorsNuitka/Nuitka15k—~1.7kAutomated safety check: PassAGPL-3.0
CI Pipeline Synthesizerkajisho5/ffmpeg-skill1.9k1 repos~1.1kAutomated safety check: PassMIT
DDNS Build and Release MaintenanceNewFuture/DDNS4.7k—~444Automated safety check: PassMIT
Dependencies Managementmaread99/market_prices106—~2.4kAutomated safety check: NotesMIT
Code PatternsAedelon/claude-code-blueprint120—~1.2kAutomated safety check: PassCustom licence

Similar skills

  • Reproduce macOS Nuitka issues across Python distributions and GitHub Actions Python packaging.

    15k GitHub stars~1.7k tokensUpdated today
    DevOps & CloudAuto-check passed
  • CI Pipeline Synthesizer

    kajisho5/ffmpeg-skill

    Generate GitHub Actions CI/CD pipeline configurations for automated building and testing of library and package projects.

    1.9k GitHub starsUsed in 1 repo~1.1k tokens
    DevOps & CloudAuto-check passed
  • Maintains the DDNS project's GitHub Actions, Docker and Nuitka builds, packaging and release preparation without touching publishing credentials.

    4.7k GitHub stars~444 tokensUpdated yesterday
    DevOps & CloudAuto-check passed
  • Dependencies Management

    maread99/market_prices

    instructions for updating and managing project dependencies (including Github actions).

    106 GitHub stars~2.4k tokensUpdated 22 days ago
    DevOps & CloudAuto-check: notes
  • Code Patterns

    Aedelon/claude-code-blueprint

    Reference patterns for REST APIs, pytest/vitest testing, Docker multi-stage builds, GitHub Actions CI/CD, PostgreSQL, TypeScript generics, Python async, and React Server Components.

    120 GitHub stars~1.2k tokensUpdated 7 mo ago
    DevOps & CloudAuto-check passed
  • Bump Sentry Dependency

    getsentry/sentry

    Official

    Bumps an existing Python dependency in getsentry/sentry through the repository's self-serve GitHub Actions workflow.

    46k GitHub stars~815 tokensUpdated today
    DevOps & CloudAuto-check passed

Categories

Questions about Audit Review

What does Audit Review do?

Perform deep feature audits with transition-matrix and logical fault-injection validation. Audit Review is an agent skill from testflows/TestFlows-GitHub-Hetzner-Runners. Perform deep feature audits with transition-matrix and logical fault-injection validation.

When should I use Audit Review?

Audit Review fits situations like: reviewing complex changes; state-machine behavior; config interactions; API/protocol flows.

How do I install Audit Review in Claude Code?

Run `npx skills add testflows/TestFlows-GitHub-Hetzner-Runners --skill audit-review -a claude-code`. Or copy the skill folder (.agents/skills/audit-code in testflows/TestFlows-GitHub-Hetzner-Runners) into .claude/skills/audit-review in your project. Claude Code loads it when a task matches its description.

How do I install Audit Review in Codex?

Run `npx skills add testflows/TestFlows-GitHub-Hetzner-Runners --skill audit-review -a codex`. Or copy the skill folder (.agents/skills/audit-code in testflows/TestFlows-GitHub-Hetzner-Runners) into .agents/skills/audit-review in your project. Codex loads it when a task matches its description.

Can I use Audit Review in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add testflows/TestFlows-GitHub-Hetzner-Runners --skill audit-review -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/audit-review, .gemini/skills/audit-review, .github/skills/audit-review and .opencode/skills/audit-review in your project.

What does Audit Review need to run?

SKILL.md names no scripts, command-line tools or credentials: Audit Review is instructions for the agent only. Our summary lists: Python 3.

Does Audit Review access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Audit Review safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Audit Review use?

Audit Review has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Audit Review use?

About 2.1k tokens (SKILL.md is roughly 8.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Audit Review?

Skills that share tags, products or a category with Audit Review: Reproduce macOS Python Flavors (Nuitka/Nuitka, 15k stars), CI Pipeline Synthesizer (kajisho5/ffmpeg-skill, 1.9k stars), DDNS Build and Release Maintenance (NewFuture/DDNS, 4.7k stars) and Dependencies Management (maread99/market_prices, 106 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Audit Review?

testflows (a GitHub organization) maintains it in testflows/TestFlows-GitHub-Hetzner-Runners, which has 102 GitHub stars. The repository was last updated on September 21, 2026.

Source: testflows/TestFlows-GitHub-Hetzner-Runners on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.